Handling sensitive data
Handling sensitive data requires careful consideration and implementation of best practices to ensure its confidentiality, integrity, availability, and compliance with regulatory requirements. In this section, we’ll look at the key strategies for managing sensitive data.
Data classification
We have discussed what data can be identified as sensitive at the beginning of the chapter. It is important for an organization to explicitly classify and document which field is sensitive. There are at least three categories of data sensitivity:
- Confidential: Only designated persons or roles can access
- Internal use: Only members of the organization can access
- Public: Accessible to all
The documentation should serve as a guideline for everyone, including engineers, in the organization to handle them with care and caution.
Data in transit
Data in transit under TLS communication is encrypted with session keys. This ensures that even...
